Federal contractors and government agencies that have access to sensitive data or sensitive government information must comply with the cybersecurity requirements established under the Federal Information Security Modernization Act FISMA and its enabling regulations.